Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: QJCljEqNqiTiXhlMdEpP7SSCzfCMSo27qAbAHBietZI=
Subject key identifier: AB:9C:8C:AB:BE:90:5A:04:9E:34:79:74:C4:17:30:D0:9A:80:FB:FD
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 019A71B8D0F0CED67E775B104D113673316F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 01BF
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: zjQg9KVYvGD6FWxpVyK6p4wo78VfK4/e3WDswwMCIQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d0:f0:ce:d6:7e:77:5b:10:4d:11:36:73:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=ab9c8cabbe905a049e347974c41730d09a80fbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:cf:16:75:07:cc:4f:99:38:84:fb:22:3b:
bf:ed:e3:34:3b:b0:2c:81:01:42:0a:a2:04:ee:ce:
ac:e7:f9:bb:eb:e6:f8:9c:2c:7a:fa:6b:28:0d:16:
e5:36:2c:6f:20:06:77:e3:be:7d:d5:a7:0c:cc:c5:
44:09:df:23:c6:2d:81:58:52:58:c4:71:8c:3f:63:
b2:f6:ed:b6:ff:43:5c:7e:59:d7:bf:22:6a:fe:94:
ad:9f:1f:60:6a:bc:aa:0d:e9:e1:8e:49:03:d4:34:
53:4b:ce:9a:cb:60:92:9b:3f:a1:31:24:40:99:b7:
23:55:7a:9e:3c:75:a7:a6:6a:3a:46:c5:a9:a7:8c:
7d:62:51:27:9b:dd:0d:42:d4:7f:40:d4:2d:3f:b6:
45:26:02:cd:11:0d:57:40:34:dc:49:81:7a:5e:a9:
20:55:3a:ce:8b:ec:68:bd:4a:6e:c8:6b:63:c0:99:
84:e2:23:20:2d:e1:fc:d3:99:46:c9:83:ba:68:f5:
d5:fa:15:f8:b1:44:da:14:df:13:a7:f5:31:5a:30:
bb:76:53:b7:56:31:4f:ad:6c:c2:41:32:e8:72:33:
2b:df:ea:ea:34:f9:d8:8d:7c:19:93:5e:5d:9f:e3:
98:3e:8b:0f:52:b9:c4:06:40:7b:9b:1f:ac:f1:89:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:8C:AB:BE:90:5A:04:9E:34:79:74:C4:17:30:D0:9A:80:FB:FD
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:93:44:87:b8:52:19:95:c2:91:99:23:eb:64:62:2c:1a:16:
12:ef:98:fa:18:4b:8b:01:73:f1:7d:40:28:e1:9c:a1:1c:a3:
0b:bc:25:de:1a:74:4c:1d:12:4f:6e:c3:f1:d8:e4:bc:98:3b:
e1:04:a1:be:6e:47:0e:04:62:0e:e1:26:5d:af:33:44:13:7e:
e9:02:98:7a:c2:b5:9f:53:b5:97:37:4b:51:cb:34:9a:da:7b:
cf:5c:c1:ee:fb:e4:ea:a8:ab:c4:89:67:97:53:a8:db:ab:3d:
85:7b:cf:fa:b1:07:8f:68:6b:b7:8b:68:fc:f8:ab:c0:55:ef:
b3:20:31:37:e4:1a:7d:02:02:97:ba:02:4b:1e:a8:66:4c:28:
78:3f:c8:72:d7:7f:db:ad:88:73:eb:df:55:1b:58:52:1e:bd:
fa:8f:15:7d:ef:d6:bf:7a:41:49:e4:98:f3:19:60:08:ec:14:
6d:55:48:d7:33:4e:23:6d:71:77:fd:01:e9:e8:40:a3:82:f5:
a3:f7:a2:60:aa:37:07:b8:d0:ad:4e:c1:d2:db:20:74:b5:cb:
f0:fa:ec:02:08:67:19:66:35:b0:f7:db:5c:cc:98:03:fc:23:
73:61:a5:87:c7:15:6f:d7:cc:45:32:1b:af:07:fe:51:62:86:
b1:ed:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:32 2025 by rpki-client